Privacy Policy

PortantisAI is an entity in the making, operated in Romania by Marius-Cornel Suciu as an individual ("PortantisAI", "we", or "us"). Marius-Cornel Suciu is the controller for account, security, and service-administration data used to operate PortantisAI.

When we process connected business data solely on behalf of a customer organization, that organization may be the controller and Marius-Cornel Suciu acts as its processor, as applicable. Privacy questions can be sent to [email protected].

We receive data directly from you, from your organization administrator, and from services you choose to connect. The exact connected-service data depends on the permissions you approve.

• Closed-beta request data: full name, work email, company website domain, privacy notice version, request time, and expiry date. We do not persist the request IP address.
• Account data: name, work email, organization, role, and authentication or session records.
• Connected-service data: profile name and app-scoped identifiers, authorized business assets, Pages, ad accounts, campaigns, ad sets, ads, creatives, catalogs, product sets, permissions, and performance insights.
• Operational data: settings, actions, recommendations, support messages, and security or audit records needed to operate and protect the service.
• Content you submit: instructions, files, notes, and other information entered into PortantisAI.

We use data to authenticate users, provide tenant access, connect and synchronize authorized services, display reports, analyze performance, generate recommendations, perform authorized operations, provide support, and protect PortantisAI.

We use closed-beta request data only to review the request and contact you about access. It is not added to a newsletter or used for advertising tracking.

Our legal bases, depending on the context, are performance of a contract, our legitimate interests in operating and securing the service, consent or authorization where required, and compliance with legal obligations.

We share data only as needed with authorized users in your organization, connected providers when you request an operation, and contracted service providers that support hosting, databases, security, communications, support, or AI processing. We may also disclose data when required by law or to protect legal rights. We do not sell personal data.

Some providers may process data outside the European Economic Area. Where required, we use an approved transfer mechanism or other lawful safeguard.

We keep personal data while an account, tenant, or integration is active and afterward only for as long as reasonably necessary to provide the service, meet legal obligations, resolve disputes, maintain security, and preserve required audit records. The data type, purpose, and applicable legal requirements determine the retention period.

Each closed-beta request carries an expiry date 12 months after submission. Expired records are removed through the restricted retention process, and a verified deletion request can remove them earlier.

Disconnecting an integration in PortantisAI clears its stored OAuth tokens, scopes, and token expiry information and stops new access through that connection. Previously synchronized business data or required audit records may remain until they are deleted under the applicable retention process or a valid deletion request.

We use technical and organizational safeguards, including access controls and encryption in transit. No system can guarantee absolute security. PortantisAI uses strictly necessary session and security cookies to sign users in and protect the service; these cookies are not used for advertising.

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data; object to certain processing; and withdraw consent where processing relies on consent. You may also lodge a complaint with your local data protection authority, including Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP).

Send requests to [email protected]. We may need to verify your identity and your authority to act for an organization before completing a request.

Connected services, including Meta, process information under their own terms and privacy policies. You control which integrations and permissions you authorize and may revoke provider access through the provider's settings. When PortantisAI exposes a Disconnect action for an installed integration, you may also use it to stop future access.

PortantisAI does not currently make solely automated decisions about individuals that produce legal or similarly significant effects. We may update this policy as the service or law changes and will publish the revised date on this page.